From 7c4cefdb2652f6647cfaa531b272950d1566dd95 Mon Sep 17 00:00:00 2001 From: alexion Date: Tue, 20 Oct 2026 04:37:41 -0400 Subject: [PATCH] docs(nix): clarify guest secret rule --- src/skills/style/nix/rules/dotfiles.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/skills/style/nix/rules/dotfiles.md b/src/skills/style/nix/rules/dotfiles.md index e76f42c..b6262fa 100644 --- a/src/skills/style/nix/rules/dotfiles.md +++ b/src/skills/style/nix/rules/dotfiles.md @@ -34,8 +34,8 @@ Host configuration provides deployment-specific values. ### Rule -Set the secret's owner to a host user before SOPS decrypts it. -Give the guest service group read access through a read-only bind mount. +A host user owns each guest secret before SOPS decrypts it. +Each guest service group accesses its secrets through a read-only bind mount. ### Rationale